Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File:                     KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier:          MWLkz6/Sl6KF4GF3nmKDrrJvCpuR1V4tBQg5DVZ4ejc=
Subject key identifier:   6B:8F:56:0E:82:F4:EF:13:B7:A9:38:AD:5D:25:3D:04:5F:D9:A7:42
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer:       /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial:       018F8748BD6CC9CC92C35A4DD06C0845C358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number:          0D95
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: yuDEmvwkhSG3D86a6Vt6vNE3DExKhxbuzQECY4StAek=)
                          2: _pwX9g3Fm2zKgfTAsD8MSDmCfCY.roa (hash: fuIb62wXVg7P9MkUAzfqRacQUf4+3+0NqNp7IeLQK/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bd:6c:c9:cc:92:c3:5a:4d:d0:6c:08:45:c3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=6b8f560e82f4ef13b7a938ad5d253d045fd9a742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:3b:ae:71:c9:aa:ef:dc:ef:66:ef:a7:bc:
                    2c:2e:fe:93:70:1f:a6:44:34:b7:c2:30:3e:02:a5:
                    fd:7b:5c:35:3a:ae:06:ca:2e:2d:18:32:13:5c:b5:
                    a9:13:d4:62:2c:b8:89:52:ee:96:05:7f:ca:c2:f1:
                    1d:47:c7:d5:bd:96:22:02:7f:28:cd:a3:50:64:13:
                    13:0e:cd:f5:5d:7f:f7:8e:b2:9c:f0:38:a1:8b:12:
                    89:b5:07:1e:2f:c0:f7:e5:99:f6:a5:b6:d3:d4:20:
                    6e:1c:16:d5:7e:fe:c3:77:7e:74:d9:fa:bb:12:0d:
                    5c:d8:f9:84:57:5d:30:52:80:64:11:9a:b3:30:f7:
                    c4:e2:c8:66:dc:1d:9d:58:6d:d7:ac:0e:f0:33:6e:
                    62:81:25:90:a9:f9:83:28:c9:e4:fb:0d:80:12:67:
                    48:3e:21:cd:81:7f:01:51:17:3b:a8:b8:8a:00:e5:
                    42:9e:3e:d4:e3:e9:53:65:f8:85:bc:78:a9:f5:72:
                    3a:fb:4e:47:3e:c8:a1:c6:bd:e8:49:06:f5:a1:3f:
                    9e:2e:bf:7e:52:c9:d6:aa:e1:20:d5:8b:b4:46:84:
                    54:a0:a6:9d:01:68:ee:96:fd:3e:34:bd:16:9f:0f:
                    78:e1:1a:91:78:db:49:b3:b8:7c:79:a0:94:b1:c5:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8F:56:0E:82:F4:EF:13:B7:A9:38:AD:5D:25:3D:04:5F:D9:A7:42
            X509v3 Authority Key Identifier:
                keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:5f:64:2f:4a:f8:a7:3e:ae:a1:3b:69:e7:bc:14:c1:3f:
         9c:1d:24:d8:0e:d1:84:ca:01:2a:79:48:33:b1:8b:a3:26:e3:
         97:20:4f:88:fc:24:40:a5:0e:c0:10:40:94:ac:18:5a:af:0a:
         81:22:85:70:19:73:3a:b3:80:aa:7a:b7:43:de:f1:77:db:6d:
         58:87:bf:46:40:ce:4d:57:08:de:d3:75:04:eb:c3:8c:52:42:
         2e:42:23:e4:b9:57:ab:e8:16:e8:a8:5a:b8:14:e6:33:71:90:
         09:d9:25:c4:d4:42:ba:17:43:e8:3d:ca:df:6e:6b:3a:6c:3e:
         18:eb:84:35:c6:93:45:1a:5b:0e:6d:68:f0:d7:53:16:86:91:
         34:07:29:00:8c:3c:74:a3:17:ac:d2:be:29:18:1e:c1:7a:78:
         9b:7c:52:b4:e1:ec:9f:08:d5:cd:65:26:c7:5e:8b:08:6d:38:
         2f:8d:93:99:97:31:b8:98:cf:53:9c:6e:dc:b8:a8:ba:3e:36:
         aa:a3:a3:cf:c4:23:d0:5d:3a:c2:bc:5a:a6:e7:c8:cd:6e:38:
         36:87:de:15:bf:e3:7c:52:bf:f2:f0:5e:a8:22:e7:25:70:23:
         10:fb:4f:7e:2d:c5:4e:ba:ef:4f:4d:4f:2f:1a:a7:e1:ce:df:
         fa:ff:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:14 2024 by rpki-client on console-ams.rpki-client.org